Subcategories

  • Discussions about packages which handle caching and proxy functions such as squid, lightsquid, squidGuard, etc.

    4k Topics
    21k Posts
    J
    @qupfer What did I bang my head over this strange 502 issue. Your solution did it! Thank you so much, even 2.5 years later!
  • Discussions about packages whose functions are Intrusion Detection and Intrusion Prevention such as snort, suricata, etc.

    2k Topics
    16k Posts
    M
    Hi, I had a problem with my home network today, so I checked pfsense and discovered that suricata had blocked the wan ip. After some tests and triggering some suricata alerts, the wan ip was blocked. I restarted pfsense and ran some more tests, but the problem no longer occurred. I then checked the wan interface settings and indeed the ip list does not include the wan ip, both now that it's working and before, when it was blocked. I'm using pfsense 2.8.0 and suricata 7.0.8_2. I use PPPoE to access the Internet.
  • Discussions about packages that handle bandwidth and network traffic monitoring functions such as bandwidtd, ntopng, etc.

    571 Topics
    3k Posts
    dennypageD
    @Leon-Straathof Data retention settings are handled inside of ntopng. Documentation here. Pay attention to the RRD note. Also, if you've turned on some of the slice and dice time series information (is off by default), I'd suggest turning them back off. These balloon the storage requirements and are of little actual use.
  • Discussions about the pfBlockerNG package

    3k Topics
    20k Posts
    fireodoF
    @tinfoilmatt said in Failed or invalid Mime Type: [application/SIMH-tape-data|0]: (ASN data is IPinfo, not Maxmind) Thats correct but "GeoLite2-Country" is from Maxmind ... (that confused me) I'm considering simply adding "application/SIMH-tape-data" to the list to test. Thats what i tought too ... I'll try when I have the time for it ... Edit: I can confirm - adding "application/SIMH-tape-data" to the list at line 257 in /usr/local/pkg/pfblockerng/pfblockerng.inc did the trick - no more error! Edit: OK, problem resolved but I would like to know, whats the cause for that error! (SIMH-tape-data sounds like a "blast from the past" ...) Thanks a lot!
  • Discussions about Network UPS Tools and APCUPSD packages for pfSense

    101 Topics
    2k Posts
    dennypageD
    @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: Interesting. I would have thought the initial reboot, which occurred as part of the upgrade, would have done the trick, but it took a second reboot, just now, to get things working. Glad you have it sorted. There was no difference in the output of usbconfig show_ifdrv at any point -- before or after unplugging/replugging the USB cable, nor after rebooting. ... Question: What would tell me whether or not a driver was loaded? If there were an attached driver, it should have shown up with the show_ifdrv command. If you use the command and look at the other usb devices, I think they will show attached drivers. I don't expect to see a driver attached to the ups, because there is a quirk that tells the OS to ignore that device (and not attach a driver). Look for idVendor and idProduct in the above output. The Vendor ID for your device is 0764, which corresponds to Cyber Power Systems, and the Product ID for your device is 0601, which is registered as "PR1500LCDRT2U UPS" (don't sweat an exact match for the name). You can see the quirk with the following command: [25.07-RC][root@fw]/root: usbconfig dump_device_quirks | grep 0764 VID=0x0764 PID=0x0005 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0501 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE VID=0x0764 PID=0x0601 REVLO=0x0000 REVHI=0xffff QUIRK=UQ_HID_IGNORE [25.07-RC][root@fw]/root: Your device is third on the list. The HID_IGNORE quirk says to ignore the device and not attach a driver. @jhg said in NUT fails to start after 2.7.2 -> 2.8.0 upgrade: You might consider adding this resolution to the release notes for 2.8. LOL... sorry, I don't have input to the release notes (I don't work here). While I wrote and maintain various packages, including NUT, I'm still just a volunteer. Most packages are actually written by volunteers.
  • Discussions about the ACME / Let’s Encrypt package for pfSense

    496 Topics
    3k Posts
    M
    Yes seems like they release a fixed script and new version doesn't break anything! I've tried on my system already! v0.1.5 w/ crowdsec 1.6.11 and 0.0.33 (with support for pfsense 2.8) Latest @mmetc mmetc released this 20 Aug 15:01 v0.1.5-1.6.11-33-2.8 This is the first version tested with pfsense 2.8. The new install script will also fix a dependency issue caused by the previous versions.
  • Discussions about the FRR Dynamic Routing package on pfSense

    294 Topics
    1k Posts
    yon 0Y
    said in Please update frr on Pfsense+ to FRR 10.3: https://redmine.pfsense.org/issues/15785 now frr 10.4.1
  • Discussions about the Tailscale package

    90 Topics
    599 Posts
    S
    Upgraded to 25.07 and facing the same issue. Tried the "tailscale up" command as suggested above but restarting the tailscale service kills the login again.[image: 1755715824513-tailscale_logged_out_25_07.jpg]
  • Discussions about WireGuard

    694 Topics
    4k Posts
    H
    I have Wireguard installed on my firewalls. I have about 12 firewalls and most of them connect back to the main firewall which allows the connection to the servers in the main building. I setup a tunnel on each and then added each location as a peer on the Main firewall. This seemed to work except that the gateway. unde3r Monitor IP it only allows one IP address. So the first one works and shows connected fine, but the other 2 are red and do not connect. Everything seems to work until I added a 3rd peer and then the 1st peer showed as if it was offline even though it looked fine and I was able to connect to devices on that network. Am I supposed to add multiple gateways to the Main firewall so that shows as up? Is this the right way for the tunnels between the buildings which need access will work - By adding a tunnel at that location and just adding a peer to the main location?
  • How to set port mirroring?

    Locked
    5
    0 Votes
    5 Posts
    4k Views
    J
    @0tt0: @jilingshu: hi all, I wanna set a port mirroring to monitor all traffic in LAN interface. I have searched this forum and found someone said I can use "dup-to" to do this(http://forum.pfsense.org/index.php?action=printpage;topic=14334.0). But he said no details. So could u tell me some more information on this? thx! Kinda interesting, but I wouldn't burden the firewall with that, have the switch do the work if possible. http://en.wikipedia.org/wiki/Port_mirroring hi, The problem is that I have no switch with port mirroring function… My switch is so cheap(50RMB, about $7) to have any functions except connecting all computers together... I only need to sniff traffic between LAN and WAN so I think make a port mirroring my firewall is suitable. ;)
  • How to monite URLs which users accessed?

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    0
    @jilingshu: yes, I really wanna to log everything which user visited. ;) A little problem: It looks like that a web proxy will make some website cannot be visited like www.alipay.com (This is the most famous online-paying website in China). Is there any way for me to prevent this problem happening? thx! BTW: I think the best solution for my problem is to make a port mirroring, but I dont know how to do this… :( Pretty straight forward once you got the switch that supports it. Check your switch's manual. You have to deal with the traffic being mirrored somehow too.
  • Perl libraries to manipulate config.xml file?

    Locked
    7
    0 Votes
    7 Posts
    4k Views
    M
    Thank You very much everyone. I guess I'll write the perl modules myself.
  • Squidguard with autoupdate

    Locked
    2
    0 Votes
    2 Posts
    4k Views
    D
    Autoupdate not a simple archive copy/paste. Need make steps for prepare archive's catalog-structure. And control config for correct blacklist names..
  • Thresholds tab in snort - suppress not stopping alerts

    Locked
    6
    0 Votes
    6 Posts
    5k Views
    G
    Wow I feel like an idiot that I did not see that before. I guess I believed the drop down menus only had Default like my Home Net and external net has and ignored the rest while completely ignoring the fine text which is quite small on my laptop…. duuurr
  • Sort test program

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    G
    You can enable the scan category and use "NMAP -sS window 4096" from a remote computer.
  • Openbgpd status page

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    C
    Yeah that status page needs a lot of help, takes way too long in such circumstances (mostly people use the command line bgpctl instead). It's on our radar to get fixed up sometime in the future. Patches welcome if you have ideas on how to make it more usable.
  • Little problem on Menu [snort]

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    G
    There is also a url error when traversing to the traffic shaper  from snort. With the following resulting URL http://192.168.153.1:8080/snort/firewall_shaper.php
  • OpenBGPD restart script error

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    _
    ok  ;) I agree with you, this script may not be used to start bgpd :) As you wrote, "Though I never investigated this issue and can't say anything" more ;) I found that error while deep testing a BGP configuration for OpenVPN/Link failover with carp, where openvpn may be started before bpgd, so that the tap device did not exist before, and for some obscure reasons (yet) bgpd was not started at boot time. So, I tested a script that check the existent of bgpd socket to restart it. It is not a standard configuration (unsupported).
  • Internet -havp-squid-client

    Locked
    12
    0 Votes
    12 Posts
    9k Views
    Q
    @ColdFusion: I have squid/havp/squidguard and my config works this way. Try putting Havp in Transparent and Squid transparent unchecked. Havp… Transparent checked upstream proxy...lan IP:squid port.....example 192.168.1.1:3128 Havp proxy port 3121 enable x-forward...checked In squid: x forward unchecked disable Via unchecked transparent unchecked I have my configuration set up exactly like this, but it doesn't work…the IP address in the logs (and in the denied page), is the router's LAN address, and NOT the client PC.  What am I doing wrong?  Is there a bug?  Can someone shed some light on this?  Thanks!
  • Squid+lusca+CDN+delay pools (pfs 1.2.3) ?

    Locked
    1
    0 Votes
    1 Posts
    3k Views
    No one has replied
  • [patched] Apache + mod_security + proxy

    Locked
    3
    0 Votes
    3 Posts
    3k Views
    M
    Had to manual configure ProxyPass and ProxyPassReverse inside httpd.conf to get it working. Site Proxy | Site Name *Enter a short descriptive name for the site. (e.g. intranet) its misleading since what you enter there will go into httpd.conf, be aware its not just a description. It will end up in the ProxyPassReverse! Will see for any other issues, maybe fix them if time permit … cheers.
  • Very urgent: Problem of updating of the SNORT rules

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    T
    update to the latest snort as you mentioned are are using snort-old There was a lot of discussion on the old snort.  Basically you updated to the latest rules based on the latest snort using an old snort version. See this as well as other threads. http://forum.pfsense.org/index.php/topic,23185.0.html
  • LightSquid only updates manually

    Locked
    9
    0 Votes
    9 Posts
    6k Views
    J
    Here is the result of running pkg_info. $ pkg_info arc-5.21o_1        Create & extract files from DOS .ARC files arj-3.10.22_1      Open-source ARJ bandwidthd-2.0.1_1  Tracks bandwidth usage by IP address clamav-0.95.1      Command line virus scanner written entirely in C db41-4.1.25_4      The Berkeley DB package, revision 4.1 gd-2.0.35,1        A graphics library for fast creation of images gdbm-1.8.3_3        The GNU database manager gettext-0.17_1      GNU gettext package grub-0.97_3        GRand Unified Bootloader havp-0.90          HTTP Antivirus Proxy jpeg-6b_4          IJG's jpeg compression utilities lha-1.14i_6        Archive files using LZSS and Huffman compression (.lzh file libdnet-1.11_2      A simple interface to low level networking routines libiconv-1.11_1    A character set conversion library lightsquid-1.7.1_1  A light and fast web based squid proxy traffic analyser lua-5.1.3_3        Small, compilable scripting language providing easy access mbmon-205_4        A tty motherboard monitor for LM78/79, W8378x, AS99127F, VT mysql-client-5.0.77 Multithreaded SQL database (client) mysql-client-5.1.44_1 Multithreaded SQL database (client) nano-2.0.9          Nano's ANOther editor, an enhanced free Pico clone openldap-client-2.4.10 Open source LDAP client implementation p5-GD-2.39          A perl5 interface to Gd Graphics Library version2 packages            BSD Installer mega-package pcre-7.8            Perl Compatible Regular Expressions library pcre-8.00          Perl Compatible Regular Expressions library perl-5.10.1        Practical Extraction and Report Language perl-5.8.8_1        Practical Extraction and Report Language pkg-config-0.23_1  A utility to retrieve information about installed libraries sqlite3-3.6.10      An SQL database engine in a C library w/ Tcl wrapper squid-2.7.7        HTTP Caching Proxy squidGuard-1.3_1    A fast redirector for squid squid_radius_auth-1.10 RADIUS authenticator for squid proxy 2.5 and later unzoo-4.4_2        A zoo archive extractor vnstat-1.6_3        A console-based network traffic monitor That's interesting I thought I had removed havp through the web interface.
  • 0 Votes
    1 Posts
    1k Views
    No one has replied
  • Anyone interested in putting TCAR in Pfsense?

    Locked
    2
    0 Votes
    2 Posts
    2k Views
    jimpJ
    It looks like that was written specifically for IPcop and uses its terminology and probably has specific requirements for that, and likely Linux-related conventions. pfSense uses FreeBSD, so it's unlikely that such a program would work properly without major work, if it can be done at all.
  • Squid Setup

    Locked
    5
    0 Votes
    5 Posts
    3k Views
    L
    i am using 2.7.3 stable on debian and 2.7.8 on Pfsense. My ISP already allowed my IP address to bypass their proxy server. But i still want to redirect to my own proxy server. Thanks
  • Cannot open one Url only

    Locked
    3
    0 Votes
    3 Posts
    2k Views
    jimpJ
    If the site is hosted locally behind that same pfSense box, try checking the box in squid to bypass the proxy for RFC1918 networks.
  • Freeradius startup problem

    Locked
    2
    0 Votes
    2 Posts
    3k Views
    jimpJ
    It's possible that this is falling victim to the same problem that several other packages have. On boot, they try to start up multiple times. First, they sync their settings and write out an rc script, and then start themselves. Then later in the boot process, the rc scripts get executed, starting them again. If you have a dynamic WAN (DHCP, PPPoE) sometimes it can happen one more time as the new IP will trigger another package sync. The package maintainer may need to add some more logic to handle this kind of situation.
  • Snort Help

    Locked
    4
    0 Votes
    4 Posts
    2k Views
    G
    I used my own suggestion and googled this page for you since you were lacking the necessary skills to do so yourself http://forum.pfsense.org/index.php?topic=18926.0;prev_next=prev
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.